CVE-2011-1923

Published: Jun 20, 2012Modified: Apr 29, 2026

4.0

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:N

Exploitability: 4.9 / Impact: 4.9

Source: NVD

Description

The Diffie-Hellman key-exchange implementation in dhm.c in PolarSSL before 0.14.2 does not properly validate a public parameter, which makes it easier for man-in-the-middle attackers to obtain the shared secret key by modifying network traffic, a related issue to CVE-2011-5095.

Affected (8)

Products: Polarssl: Polarssl

Polarssl

1 product

Polarssl

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Polarssl Polarssl	Up to 0.14.0
Polarssl Polarssl	Version 0.10.0
Polarssl Polarssl	Version 0.10.1
Polarssl Polarssl	Version 0.11.0
Polarssl Polarssl	Version 0.11.1
Polarssl Polarssl	Version 0.12.0
Polarssl Polarssl	Version 0.12.1
Polarssl Polarssl	Version 0.13.1